Types

RevokedCertificate represents a revoked certificate in a
list. Each certificates are supposed to be distinguishable by
issuer name and serial number, so it is sufficient to have only
serial number on each entries.

Functions to manipulate revocation list

newCRL creates an empty revocation list. You must set the
following properties to and sign it (see signCRL) to actually use
the revocation list. If you have any certificates to be listed, you
must of course add them (see addRevoked) before signing the list.